If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Does Anybody knows how to track IPs?

Hi:
Im using the headers to see the originating IPs but which one do I use? I see one next to the word HELO. I got 3 emails from prettty ladies in Global-date-com and one IP came from US, 1 from Germany and 1 from UKraine. wonder which girl is real! Does it make any difference what emai they are using? One is using googlemail.com, the other is using gmail and 3rd one is using a private email or work email. ANybody who knows can yu please tell me so I would be aware of scammers.
Thanks

Ahh, Admin beat me to it anyway as I'd was just doing the message I'll post it.

Hi,

1st Lady.
Well for a start she is using ?The Bat? a lot of scammers use that, the IP 195.5.125.3 resolves to Luganet in the Ukraine.
Possible scammer, Where does she say she?s from ?

2nd Lady
Again using ?The Bat? the IP address 82.211.136.14 resolves to Limassol in Cyprus. IP 82.211.136.14 - this is a Cyprus Planetsky satellite provider that provides satellite Internet access for Mari El. When you see "Cyprus", that means Mari El?. That information is from a very good source.
So again I would say that is a scammer.
Mari EL is well known for a gang of scammers, they post fake profiles all over the internet.

3rd Lady
IP 81.169.226.162 resolves to Pascalstrasse 10, Berlin
She is using an email programme called Voyager which I don?t now anything about.
Not sure could be fake again.

The way to track an IP is to use the second IP address in the header, you can then goto this site to check the information of the IP :- http://www.whois-search.com/

Another thing about the Internet in Russia is that the IP address should resolve to the location that the person says they are from, In Europe it usually goes to the Users ISP instead. My IP address resolves to a city 100 miles from where I live.

If you want to PM me more details where you meet them so I can see the profiles, I may even be able to find the Scam reports for them.

Hello Admin:
So what does this tells me? 1st lady says she is in Crimea Region Simferopol, and internet is in Luganks, and next 2 ladies may be false. Humm...Im beginning to lose hope on online dating..hehehe

X-Apparently-To: taxx85@yahoo.com via 209.73.179.70; Wed, 16 Aug 2006 11:22:20 -0700
X-Originating-IP: [64.233.162.205]
Return-Path: <tatyiana.sweety@gmail.com>
Authentication-Results: mta437.mail.mud.yahoo.com from=gmail.com; domainkeys=pass (ok)
Received: from 64.233.162.205 (EHLO nz-out-0102.google.com) (64.233.162.205) by mta437.mail.mud.yahoo.com with SMTP; Wed, 16 Aug 2006 06:27:20 -0700
Received: by nz-out-0102.google.com with SMTP id z6so82205nzd for <taxx85@yahoo.com>; Wed, 16 Aug 2006 06:27:13 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:date:from:x-mailer:reply-to:x-priority:message-id:to:subject:in-reply-to:references:mime-version:content-type; b=RgzIvb5jab26W+mxPvj4OZKOf0Rt7eevZlerQaWbrbyOB4Ph MSM7yMaLNu2RgJbRPYud7KKbyxr3jdHxxDwCW7h68a9Cp6kQ8m VIAn4iwUvjCrCrMlN1GrnC4AIks5NpMt3d7qqNEhjysk/7Pjthe8L0fx1BLvyIUZhOgo8jGDo=
Received: by 10.65.114.11 with SMTP id r11mr583808qbm; Wed, 16 Aug 2006 06:27:12 -0700 (PDT)
Return-Path: <tatyiana.sweety@gmail.com>
Received: from 192.168.0.160 ( [75.7.34.46]) by mx.gmail.com with ESMTP id a29sm221688qbd.2006.08.16.06.26.50; Wed, 16 Aug 2006 06:27:11 -0700 (PDT)
Date: Wed, 16 Aug 2006 11:08:52 +0400
From: "tatyiana.sweety" <tatyana.sweety@gmail.com> View Contact Details Add Mobile Alert
Yahoo! DomainKeys has confirmed that this message was sent by gmail.com. Learn more
X-Mailer: The Bat! (v1.62r)
Reply-to: "tatyiana.sweety" <tatyiana.sweety@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <1353018244.20060816110852@gmail.com>
To: "taxx85" <taxx85@yahoo.com>
Subject: Hello my love Tony!
In-Reply-To: <20060815082024.2897.qmail@web61316.mail.yahoo.com >
References: <20060815082024.2897.qmail@web61316.mail.yahoo.com >
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------AC17F6B3B69EAAB"
Content-Length: 239259
--------------------------------------------------
This person is the most who has written letters (40) plus 52 pictures all the same girl, but by coincidence I saw one picture of her in the scammers list. I confronted her but she denied it but didnt explain. I was thinking hard on her due to the many letters almost every day but she never asked me for anything so far. Now she writes less as I also dont respond rapidly but I told her that I need to talk to her on the phone and she says its difficult. Well, now I use the headers and she is using the BAT. Last time, she wrote she was talking of planning meeting. Her english looks russian but Im surprised all IPs are from USA or am I wrong?. Kind of worried as I sent her my physical address but she never sent me hers and she says she is Kazan Russia, but in the scammer list the person named is one from Nigeria but the english is not nigerian as I now can distinguish this. They talk a lot about "baby" and "OK" phrases.
Let me see what you can find.
Thanks

I'll answer the question so you can all find out for yourselves!
IpNetinfo (www.nirsoft.net) is a great little, no install, freeware app that prompts you to type in an IP Address (paste it from the E-Mail header) and then displays the whois information for you.

hallo I am also giving the header from a lady,I have been speaking from last few days,she is saying that she is from Chebosary, can you please tell me from IP , where these email coming from.Please reply me.